Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
File:                     WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft (raw, json)
Hash identifier:          WsW3941I2f6xbqT76pQ+dRLOE3kOOOoN8TjJVwl+gGM=
Subject key identifier:   72:6E:69:36:5F:5C:51:43:EB:04:14:D2:02:D9:43:59:E7:14:FD:D6
Authority key identifier: 58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE
Certificate issuer:       /CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
Certificate serial:       019771F65064AE17B13D738FE34CCD1FB048
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
Manifest number:          04CB
Signing time:             Sun 15 Jun 2025 05:00:57 +0000
Manifest this update:     Sun 15 Jun 2025 05:00:57 +0000
Manifest next update:     Mon 16 Jun 2025 05:00:57 +0000
Files and hashes:         1: PIXJy1lwlibwbVRJMDgxK7qX3n8.roa (hash: G+nFG8M3t0bz2vOGqdbaOSNmLf0qzMF1t7uKbdGXy6c=)
                          2: WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl (hash: FZRWqldped8dIJjr07utxI46aZuHZPAhOmE0ybni+2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:19:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:71:f6:50:64:ae:17:b1:3d:73:8f:e3:4c:cd:1f:b0:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58de5044ed83875c7e9ee8ecb87dd6d31dd5c4ae
        Validity
            Not Before: Jun 15 05:00:57 2025 GMT
            Not After : Jun 16 05:00:57 2025 GMT
        Subject: CN=726e69365f5c5143eb0414d202d94359e714fdd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:07:98:82:f5:99:56:c4:f3:14:67:7e:88:69:
                    85:e0:22:53:2b:67:93:03:42:54:00:62:7f:19:9c:
                    53:e7:6e:57:52:f7:a2:ea:c7:92:27:f1:1c:65:67:
                    61:52:96:78:99:d5:58:8c:7e:41:db:c3:79:5a:ef:
                    d0:04:bc:90:e8:20:38:40:2d:a2:1d:db:20:63:37:
                    5b:9b:95:ec:7d:ea:a5:d4:11:ef:14:ee:05:ea:22:
                    c8:d1:4e:e8:59:eb:68:ae:c7:48:34:39:c1:c3:0d:
                    1f:04:18:16:75:0c:ff:a9:63:df:8e:89:d4:27:6a:
                    60:41:42:c6:13:a3:0e:10:5d:6c:f0:b7:5d:65:07:
                    8f:12:39:01:70:cb:f0:04:71:bc:3e:ac:d7:2e:13:
                    d0:e1:d4:88:c4:23:60:64:82:b8:93:3d:e2:e7:3b:
                    7a:08:08:b9:e8:15:eb:3e:60:0a:04:da:6b:fb:7c:
                    f6:28:b6:59:a2:db:69:9e:0e:6d:cc:6c:fc:ba:0b:
                    6c:a2:8f:aa:82:26:d8:da:3e:7c:7f:88:90:be:85:
                    4c:e2:2d:7c:cd:92:ac:53:0a:4c:f9:ca:51:75:d0:
                    51:74:5a:0f:4a:47:07:59:fc:0a:5a:bf:e0:83:06:
                    f8:ea:29:78:30:de:15:a2:8a:0f:61:da:a5:ad:07:
                    94:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6E:69:36:5F:5C:51:43:EB:04:14:D2:02:D9:43:59:E7:14:FD:D6
            X509v3 Authority Key Identifier:
                keyid:58:DE:50:44:ED:83:87:5C:7E:9E:E8:EC:B8:7D:D6:D3:1D:D5:C4:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WN5QRO2Dh1x-nujsuH3W0x3VxK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9d16a9-2757-42b1-8654-aa958788eebf/1/WN5QRO2Dh1x-nujsuH3W0x3VxK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c0:9d:58:0e:c3:fb:86:19:e8:a8:8d:1e:17:17:5d:bb:e7:
         09:dc:90:6a:88:e2:66:ca:64:5d:ad:8c:a9:1d:72:28:ff:4e:
         0a:01:0a:31:66:18:a3:e3:2c:d2:b8:ad:f6:df:db:b8:9c:26:
         d8:57:ca:93:ec:f0:d0:8e:3c:50:c3:dc:e3:ec:bc:14:87:f4:
         cd:32:29:6d:c4:d4:bf:aa:cb:26:0b:6f:23:ba:d5:50:af:14:
         40:a0:f9:87:47:18:95:1c:03:4e:04:05:fd:3c:77:36:6e:2f:
         0f:89:dd:f4:13:2d:e1:b5:05:d7:b3:99:74:fb:5a:00:d2:80:
         eb:e7:f1:f8:45:08:c4:98:91:df:6e:f4:8d:ce:d7:10:26:13:
         39:cf:6e:b5:ee:bd:a2:88:e4:39:08:3a:c1:a7:1b:6d:9e:cd:
         2e:04:2c:35:59:57:6e:9f:56:7e:64:90:e2:e0:5b:40:18:c8:
         90:94:b4:ff:e4:3a:81:10:34:dc:92:56:34:2b:59:24:3c:5e:
         06:57:bc:d6:c4:68:0e:ab:de:39:d1:75:ff:42:b9:ec:b7:00:
         f6:8e:60:c3:79:0c:49:58:c5:dc:5c:f5:30:08:60:53:c4:49:
         4e:24:2a:ff:b7:3f:73:38:3a:4f:f6:80:e3:b8:06:d9:2a:24:
         ab:6a:ef:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:43:41 2025 by rpki-client